Closing and Deleting an Indicator

Scenario

This topic describes how to close and delete an indicator.

• Disabling indicators: If the threat corresponding to an indicator is eliminated, you can close the indicator.
• Deleting an indicator: If the indicator is incorrect or the threat scenario described by the indicator does not exist, you can delete the indicator. Deleted indicators cannot be restored. Exercise caution when performing this operation.

Closing and Deleting an Indicator

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

5. In the navigation pane on the left, choose Threats > Indicators.
   Figure 2 Indicators
   

6. On the Indicators page, close or delete an indicator.

   Table 1 Indicator parameters

   Operation	Description
   Close	On the Indicator page, locate the row that contains the target indicator, click Close in the Operation column. The Close dialog box is displayed. In the dialog box that is displayed, select the close reason and enter comments. Click OK.
   Delete	On the Indicators page, locate the target indicator and click Delete in the Operation column. In the dialog box displayed, click OK. NOTE: Deleted indicators cannot be restored. Exercise caution when performing this operation.